I wonder this both for the current Windows 10 and also for all previous versions of Windows. but nothing would surprise me at this point, frankly.

Is the idea that sticking a USB stick/device into a PC is insecure in itself complete nonsense? Is not the truth that the user would have to actively select 'Yes, please install the drivers from this random unknown device' or 'Yes, please run this untrusted EXE found on this stick you just inserted and which I auto-mounted for you but would never run anything on without your active consent'? I get the same feeling as when people claim to get 'hacked' constantly, but then it turns out they ran some binary e-mail attachment or clicked a big red box saying: 'WARNING! Do you really want to run this EXE from sketchy-hack-toolz-4-u.example?'.

Why exactly are 'drivers' needed whatsoever? Isn't it using the USB standard? And also the 'mass storage' standard? I don't understand why it would ever need special 'drivers' for a standard device.?.

Regardless of all of the above, will Windows ever auto-install DRIVERS found on the device itself when inserted into the PC (with or without lock screen)? Or is just the 'device id' grabbed from the stick/device and then the appropriate drivers are downloaded from Microsoft's secure, curated servers based on the device id?.In both cases above, will it ever run any kind of executable found on it by default? (Like which I believe used to be the case for setup.exe on CD-ROMs back in the day.).If a USB stick/device is inserted into a PC running Windows, currently NOT in 'lock screen' mode, it will auto-mount it by default?.

If a USB stick/device is inserted into a PC running Windows, currently in 'lock screen' mode (that is, somebody has pressed WinKey + L), it will auto-mount it behind the scenes?.Am I really understanding things correctly if I claim that:

Autorun flash drive windows 10